Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: utTgFIPa3viOkaoJU1NldLr/9/h2BZeojWc1R3O9t24=
Subject key identifier: D1:F2:F1:98:FB:79:2D:A2:53:52:B7:B6:D5:4C:2E:06:B4:7D:FB:33
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019FAA878F44D51702C3C1FFA088362A9090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 21:00:38 +0000
Manifest this update: Tue 28 Jul 2026 21:00:38 +0000
Manifest next update: Wed 29 Jul 2026 21:00:38 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: 4tsZES4dng8gfkIcuDa95PudfQZhp+ehudkawgzo/Wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:8f:44:d5:17:02:c3:c1:ff:a0:88:36:2a:90:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jul 28 21:00:38 2026 GMT
Not After : Jul 29 21:00:38 2026 GMT
Subject: CN=d1f2f198fb792da25352b7b6d54c2e06b47dfb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:5c:91:6e:47:16:f5:24:0c:de:24:73:28:
83:1d:66:9e:9c:c7:4c:e4:f8:9e:24:42:78:54:76:
93:21:d0:bd:8d:82:d2:74:29:55:02:45:3e:4e:9e:
9e:67:46:e6:9c:c6:92:4e:a0:58:11:fa:51:4e:77:
b4:6c:14:d9:f8:ca:39:73:1e:4c:06:7f:bf:76:ed:
2b:00:da:82:33:d2:cc:f7:50:05:20:58:26:82:6d:
5c:3b:a1:db:e1:51:68:14:fc:ec:b5:b8:98:bd:40:
cf:c7:df:be:5d:40:69:5f:47:c7:14:1c:c0:d9:18:
70:02:ab:86:a4:47:c5:14:e5:20:78:3e:27:90:93:
43:db:ff:4a:88:b9:b7:25:76:eb:10:cf:80:0a:38:
d9:e4:79:7d:4d:09:c6:19:9a:4c:c1:ca:22:c2:a0:
da:2a:27:ff:01:5a:cd:1e:1d:8f:cf:61:af:fb:04:
bd:6e:41:1c:a1:20:a5:89:95:21:64:16:5f:d2:5e:
34:a6:b6:d0:ba:5d:96:ae:f8:e6:0e:6f:a1:92:f1:
34:9d:61:fa:e5:e3:04:ae:93:5e:fb:88:1b:e0:b1:
11:df:13:ff:c6:27:66:3b:d9:af:0e:94:e5:dd:1f:
a7:eb:d4:f7:0f:56:90:b9:e3:c1:c6:be:ac:f7:75:
d7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F2:F1:98:FB:79:2D:A2:53:52:B7:B6:D5:4C:2E:06:B4:7D:FB:33
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:c3:81:1f:fe:2d:6c:9a:ec:87:db:84:32:b2:bf:d6:1b:b8:
76:b6:65:47:43:fa:c0:bb:ff:69:22:08:00:a5:c6:e7:ad:cd:
4a:19:d8:d8:4e:93:3f:73:ad:77:06:05:db:2f:fd:f0:7d:ed:
7e:b5:6c:01:43:79:94:fa:d1:69:6b:99:f2:08:80:2f:f5:e4:
81:0e:58:ac:11:23:43:41:7a:fc:c2:70:a2:40:dc:e3:59:62:
0f:3e:39:91:43:78:e4:69:40:ae:88:17:51:97:ff:02:de:59:
0f:7f:a5:3b:8b:18:05:12:2e:1c:db:b8:e2:40:c5:4d:e8:33:
05:2d:f9:a3:35:4f:6c:ac:c9:cd:e3:15:58:00:37:3d:30:e7:
7e:95:97:70:1f:cc:c1:8f:66:74:b3:c6:bc:ad:6a:73:59:58:
84:37:9d:48:e0:af:e5:41:32:ca:8d:fa:97:c1:2b:ac:d0:ff:
7d:d3:56:ce:26:cc:32:3e:d0:f9:d4:66:1f:7e:a4:d4:5a:80:
48:0d:dc:03:ee:4e:19:4d:a7:8a:60:6a:bb:56:dc:72:f6:ec:
ce:2a:47:fc:e7:80:65:15:14:b7:1d:4d:47:6b:17:ad:86:ce:
56:e4:58:c3:50:25:a3:06:d5:c2:9f:c6:91:77:25:7f:eb:64:
0a:ed:3b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:11:55 2026 by rpki-client